Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/3133382e3235352e3138302e302f32322d3332203d3e20323633393837.roa
File:                     3133382e3235352e3138302e302f32322d3332203d3e20323633393837.roa (raw, json)
Hash identifier:          ta006S3PztbLU/Ucmyf23+dv/EiEB1ArNlwm1CEIzRA=
Subject key identifier:   8E:56:BE:6F:3C:1C:C1:D9:24:3B:7F:47:DC:EE:54:D3:26:2E:F2:86
Certificate issuer:       /CN=7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75
Certificate serial:       4B740107967009FB204390D17BE72FC200DDD0ED
Authority key identifier: 7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/3133382e3235352e3138302e302f32322d3332203d3e20323633393837.roa
Signing time:             Mon 30 Jun 2025 14:40:20 +0000
ROA not before:           Mon 30 Jun 2025 14:35:20 +0000
ROA not after:            Mon 29 Jun 2026 14:40:20 +0000
asID:                     263987
IP address blocks:        138.255.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.crl
                          rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:74:01:07:96:70:09:fb:20:43:90:d1:7b:e7:2f:c2:00:dd:d0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75
        Validity
            Not Before: Jun 30 14:35:20 2025 GMT
            Not After : Jun 29 14:40:20 2026 GMT
        Subject: CN=8E56BE6F3C1CC1D9243B7F47DCEE54D3262EF286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:cc:c7:73:fc:3b:fc:be:5f:47:e5:69:4c:
                    ce:45:eb:d5:64:cd:ba:3c:fd:0d:07:0b:2c:69:5a:
                    3e:94:16:18:ad:60:ca:e0:84:7c:e1:57:9e:f0:d4:
                    fc:e0:b8:a8:3e:0d:53:91:69:78:ab:ac:d4:23:f1:
                    54:b3:ad:17:a8:5b:94:aa:0f:e3:cf:bc:81:a6:1f:
                    3a:be:a9:47:41:0c:39:59:6a:40:0c:96:7a:1e:a9:
                    2c:27:db:ab:c6:7d:85:45:a0:85:f3:ce:be:81:e0:
                    29:e5:25:35:6f:ec:3c:6f:ec:24:1a:06:aa:0b:50:
                    b1:ff:25:0b:74:1b:86:d3:5a:f1:ee:77:04:de:bc:
                    7b:e9:e3:fc:dd:c2:bd:2e:fe:60:9b:d2:e7:a4:a6:
                    f4:ef:22:9f:41:20:49:bd:d1:49:72:45:84:2e:e2:
                    2b:59:c9:26:f3:bb:e5:d8:d1:2a:83:68:e5:be:a8:
                    9e:8f:78:55:74:e3:9e:6e:87:c8:4f:f0:5c:8f:3a:
                    26:99:3b:7c:71:65:52:d0:80:b3:5e:4f:d5:bf:cc:
                    b3:34:eb:c0:3a:9a:80:d0:36:c8:92:68:3c:64:c2:
                    84:a6:5b:60:ec:90:fc:1e:3b:33:af:78:0e:df:11:
                    4f:c6:42:b9:1e:25:6b:07:7a:da:23:9d:d7:84:7c:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:BE:6F:3C:1C:C1:D9:24:3B:7F:47:DC:EE:54:D3:26:2E:F2:86
            X509v3 Authority Key Identifier:
                keyid:7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/3133382e3235352e3138302e302f32322d3332203d3e20323633393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:6b:66:f9:aa:87:99:6f:db:c5:95:96:cd:ac:ac:2e:09:
         6f:8d:95:e7:0f:6c:da:cf:ec:9d:76:70:17:96:44:11:97:12:
         95:da:4a:82:31:57:21:ba:14:dd:c3:ee:b1:c7:8c:e7:07:95:
         e3:fb:c3:e5:fc:aa:68:dc:fa:53:7f:ae:20:5f:7d:9d:dc:6f:
         99:9d:41:cb:82:6b:d1:b8:d6:a0:1b:73:df:7a:c8:99:a8:f9:
         0f:5c:5f:0e:b8:e9:71:bb:f4:3c:2a:62:0d:d6:cd:2c:e3:e9:
         d8:ed:f0:a7:ee:3d:26:e4:93:6f:a2:5b:0e:27:56:cf:fa:a3:
         5c:df:da:39:eb:17:a6:1f:28:5e:07:29:30:96:28:f0:b4:29:
         d5:42:56:6d:ff:1b:17:35:30:98:61:7a:86:ec:c8:33:08:de:
         b5:7c:4e:96:6c:aa:a9:67:c8:1f:c5:89:6e:0d:93:8a:c1:d7:
         25:0f:38:b7:fb:90:c8:fc:06:52:f5:57:ea:d7:ad:63:9b:12:
         b3:6f:f7:52:14:bb:59:de:ae:32:5c:7f:61:f4:8e:64:00:77:
         bf:ab:eb:d9:57:fa:2e:bd:b4:f7:95:82:96:93:fc:67:c4:15:
         41:ec:cb:78:fe:40:f0:5c:c4:9f:12:3f:bf:2c:e2:07:ec:36:
         09:fe:4e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:40:29 2025 by rpki-client